Skip to content
OpenAdvisories

Product · anyant

rssant

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint

    rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.story_get endpoint. Because UnionStory.get_by_feed_offset ignores the only_pub…